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herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
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2. 13 The allowed claim(s) is/are 5-8 and 16-24 . 
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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with George Jakobsche on 1 1/1 1/05. The application has been amended as follows: 



^ecaitiri^a distJ^^ <^^^ data processing agents^ conipnsing t»^e at^s;x 

receiving a first service request from the ustar at one of Ae: plurality of first data processing 

agente; 

submitting an authentication request from the one of the plurality of first data processing 
agente to a second data processing agent to authenticate the usa; 
auAaiticating the usei at the second data processing agtaat; 

if the user is successfully auAenticated:; 

: storing a first timbout value indicative of a predetermined first tinie period 

scci)nd:dataproGessingageatiMd;;^ 

sending autiifmttcation infonnfltion tha t the one of ttie nluraUty pf first data 
procaine aaentfi-^n me ta fliihseoueiitlv re-antheriticate thn yiser without ^w^hn^ittin^^ svl?sequent :: 
attiheHticati or f: request to: flic secondi ^ 



on the 



detenniningwhcthcr the pt^edcterniined first time period is^e^ 
xiiiikliie-prede^^ 

fiom the user: reqiririg tiie user to be^ tbcntioatod; aO o&jn^ the second data processing agent 
upon recidpt of thesecoiid ;seiyit«:req^ 

: : if the secpnd service request is received from tlne uspr at another of thcplurality of first data. 

^^iibe^iri^i^^e^ 
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V^iim^ Axxm^A^^ ft>r autheaticating a user of a client camputcrat a server computer 
exociitmg a distributed application on d plurality of date prdcessi^ife ageiits.the system comprising: x 
a iierver iiicludias a pluraUty of first data processing agents for receiving service requ«.1s 
^om the user and a second data processing agpnt for authenticat^g fee user, 

wherein eabh; of the plurality o^ finrt data processing agento is configured to submit ar| 
authenticationrequasttotheseconddataprocessu^^ . 
: : wherdnthe second data piocessing agent is configured to; 

■ receive the aiihentiialion truest frf7mlhr'f.ihmininpfirst:<lf<tnT^^ . 
.atteinpttb anthtsnticatetheuBerisaad ; : 
' : . ■ if tu. r^k^i^ kuco-^faHv authenticated, store a fi^ timeout value indicative 
first predetermined time period4Miu uuu iJ auc c c nofu Uy mi t Weated, and. iond to the submitting 
.... ^r.r..^n. aac.it pnth-nii-'- ^^--V'^ ^^i^^ th. ^hmittinn fir^ d.t. ffroc-as^rinR agent can 
".^ tn .,Wmentl Y ».-»..fiin.fir..t.e ifae ilhnnt i-^ihm ittinrr iyh^^ry^nj^ f^^ithcntica^jpo yequest 

t<i the secr "^ 'H" pit^^sine agent and 

determine whether the first predetermined time period is exceededkr | 

wherein each of the plurality of first data processing agents is fiirther configured to notify 
.: the second data pix>cessmg agent if a second^ service request is received fr«m1hc user, and. the 
second data processing agent is configured to restart the first timeout vahie in r^ponse to receiving 
: ihe notification aiter receiving a prcviom notification, rdatrve to theiiscr, from another one of the ^ 

first data processing agents, 

Avhoein each of the phirality of first data processing J^ts is fitttli6r co^^^ 

^ the user to be. '0 guthctiticatod irt iagintojie second^d^ ^ • 

' service request if ttie first predetemained timc penod is exeeeded^^^^^ the second scivice request ^ 
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■ ■ 17 (om^A^^"^^^ 

■ > • if fe user is ^uccessMly autlidilioafcd, storing a; 3e«,nd .t^^^^ 

' and • • • • • . . ■ ' • 1 • 

; if thB at least one of the plurality of first data procc^Sng agents recei ves Ihe second sq;ytce 

request before the second timeout period i9 exceeded: 

^ restarting Ihe second timeout p«iod stored on^et>gt-theoT .>. of thet^uxaUty of 
sB^fetdataprocessingagentsQ^recdvedtliesecon^servic^ .. 

providing the requi^^ed service to theuser witliout ro^ 
auflienticated at the seobnddata processing agent upon receipt of the second service r^uest. • 



2. The following is an examiner's statement of reasons for allowance. Claims 5-7 
and 16-20 are directed to an authentication method in a distributed environment in 
which a first data processing agent utilizes a second data processing agent for 
authenticating a first request for service from a user received at the first data processing 
agent, and the second data processing agent monitors an inactivity timeout period 
associated with the user's session with the first data processing agent. More 
specifically, independent claim 5 identifies the uniquely distinct features: if the user is 
successfully authenticated, sending authentication information that the first data 
processing agent can use to subsequently re-authenticate the user without submitting a 
subsequent authentication request to the second data processing agent, and if a 
second request is received from the user at another of the plurality of first data 
processing agents before the first time period is exceeded, restarting the first timeout 
period. The closest prior art, Sampson et al (6,490,624) discloses managing a common 
timeout value associated with a user; the timeout value being reset when a request 
made by the user is received at any first data processing agent; however, Sampson 
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does not discloses that the first data processing agent perfornns authentication. Another 
prior art, Fuh et a! (6,463,474), discloses sending authentication information that the first 
data processing agent can use to subsequently re-authenticate the user without 
submitting a subsequent authentication request to the second data processing agent; 
however, Fuh second data processing agent does not manage timeout values for users' 
requests. Still another prior art, Gupta et al (6,226,752), discloses an authentication 
method in a distributed environment in which the first timeout period is restarted if a 
second request of the same session is received; however, Gupta does not teach that 
the first data processing agent performs authentication and the first timeout period is 
restarted if a second request is received from the user at another first data processing 
agent. The prior art, taken either singly or in combination, fails to anticipate or fairly 
suggest the limitations of applicant's independent claim, in such a manner that a 
rejection under 35 U.S.C 102 or 103 would be proper. The claimed invention is 
therefore considered to be in condition for allowance as being novel and nonobvious 
over prior art. Claims 8 and 21 -24 are system claims corresponding to the method 
claims 5-7 and 16-20 and, therefore, are allowed for the same reasons. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Minh Dinh whose telephone number is 571-272-3802. 
The examiner can normally be reached on Mon-Fri: 10:00am-6:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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